aliasing.go

package gcpauth

import (
	"fmt"
	"sort"
	"strconv"

	"google.golang.org/api/compute/v1"
	"google.golang.org/api/iam/v1"
)

type iamAliaser func(role *gcpRole, svcAccount *iam.ServiceAccount) (alias string)
type gceAliaser func(role *gcpRole, instance *compute.Instance) (alias string)

const (
	defaultIAMAlias = "role_id"
	defaultGCEAlias = "role_id"
)

var (
	allowedIAMAliases = map[string]iamAliaser{
		defaultIAMAlias: getIAMRoleID,
		"":              getIAMRoleID, // For backwards compatibility

		"unique_id": getIAMSvcAccountUniqueID,
	}
	allowedGCEAliases = map[string]gceAliaser{
		defaultGCEAlias: getGCERoleID,
		"":              getGCERoleID, // For backwards compatibility

		"instance_id": getGCEInstanceID,
	}

	allowedIAMAliasesSlice = iamMapKeyToSlice(allowedIAMAliases)
	allowedGCEAliasesSlice = gceMapKeyToSlice(allowedGCEAliases)
)

func iamMapKeyToSlice(m map[string]iamAliaser) (s []string) {
	for key := range m {
		if key == "" {
			continue
		}
		s = append(s, key)
	}
	sort.Strings(s)
	return s
}

func gceMapKeyToSlice(m map[string]gceAliaser) (s []string) {
	for key := range m {
		if key == "" {
			continue
		}
		s = append(s, key)
	}
	sort.Strings(s)
	return s
}

func getIAMSvcAccountUniqueID(_ *gcpRole, svcAccount *iam.ServiceAccount) (alias string) {
	return svcAccount.UniqueId
}

func getIAMRoleID(role *gcpRole, _ *iam.ServiceAccount) (alias string) {
	return role.RoleID
}

func getGCEInstanceID(_ *gcpRole, instance *compute.Instance) (alias string) {
	return fmt.Sprintf("gce-%s", strconv.FormatUint(instance.Id, 10))
}

func getGCERoleID(role *gcpRole, _ *compute.Instance) (alias string) {
	return role.RoleID
}